SEC’s Four-Day Breach Rule: Disclosure Becomes a Control
The SEC's July 2023 cybersecurity rule put public companies on a four-business-day material-incident filing clock — turning breach disclosure into a rehearsed, enforceable, executive-owned security capability.